Third-Party Risk Management Permissions and Roles

Add Asset Cert

AddAssetCert

Allows users to add asset certificates.

Add Inventory Controls

InventoryAddControls

Allows users to associate controls to asset and processing activity inventory records.

Application Question Group

ApplicationQuestionGroup

Allows users to add the application discovery group to a template.

Application Question Group Create

ApplicationQuestionGroupCreate

Allows users to create an application discovery group.

Application Question Group Delete

ApplicationQuestionGroupDelete

Allows users to delete the application discovery group.

Asset Create Tasks

DataMappingInventoryAssetsTasksAdd

Allows users to create tasks on assets.

Asset Delete Tasks

DataMappingInventoryAssetsTasksDelete

Allows users to delete tasks on assets.

Asset Edit Tasks

DataMappingInventoryAssetsTasks

Allows users to view tasks on assets and the tasks that are assigned to them.

Change Vendor Workflows

DataMappingChangeWorkflowOnVendor

Allows users to update the workflow and workflow stages on vendors.

Configure Attribute Groups

ConfigureAttributeGroups

Allows users to configure attribute groups in the attribute manager.

Copy Inventory

CopyInventory

Allows users to copy inventory records.

Create Inventory Task Import

InventoryBulkImportTasks

Allows users to bulk add tasks on inventory records.

Custom Email Assets View

CustomEmailAssetsView

Allows users to see and edit asset email templates.

Custom Email Data Mapping Automation View

CustomEmailDataMappingView

Allows users to see and edit data mapping email templates.

Data Mapping Automation Advanced Attribute Configuration

DataMappingAdvancedAttributeConfiguration

Allows users to add attributes that can be tracked at a more granular level such as per related inventory or personal data object.

Data Mapping Automation Attributes Data Elements Delete

DataMappingAttributesDataElementsDelete

Allows users to delete data element records from the list of data elements. Once a data element is removed, it will not populate in the data mapping assessment. Even with this permission, users will not be able to delete data elements records that are managed by a parent organization above the user's organization in the hierarchy.

Data Mapping Automation Attributes Data Elements Edit

DataMappingAttributesDataElementsEdit

Allows users to edit attributes of a particular data element record in the data elements list. With this permission a user can change the name of a data element, the managing organization tied to the data element, the data subject tied to the element, and the data category and classification of the element. Even with this permission, users will not be able to edit data element records that are managed by a parent organization above the user's organization in the hierarchy .

Data Mapping Automation Attributes Data Elements Add

DataMappingAttributesDataElementsAdd

Allows users to add a new data element record to the list of data elements. These records will populate as answer choices for the “Data Elements” question in the data mapping assessment.

Data Mapping Automation Attributes Wizard

DataMappingAttributesWizard

Allows users to access ‘Configure Inventory Attributes’ wizard which guides users to activate seeded inventory attributes based on laws/regulations.

Data Mapping Automation Crossborder

DataMappingCrossborder

Allows users to view cross-border map.

Data Mapping Automation Data Element Bulk Create

DataMappingDataElementBulkCreate

Allows users to bulk create data element records using the bulk import service.

Data Mapping Automation Data Element Bulk Update

DataMappingDataElementBulkUpdate

Allows users to bulk update existing data element records using the bulk import service.

Data Mapping Automation Data Maps Assets By Location

DataMappingDataMapsAssetsByLocation

Allows users to view the data mapping asset map visual.

Data Mapping Automation Data Maps Lineage

DataMappingDataMapsLineage

Allows users to view the data lineage list and lineage diagrams.

Data Mapping Automation Delete Entities

DataMappingDeleteEntities

Allows users to delete entities.

Data Mapping Automation Edit Entities

DataMappingEditEntities

Allows users to edit entities.

Data Mapping Automation Entities Bulk Create

DataMappingEntitiesBulkCreate

Allows users to bulk create entities.

Data Mapping Automation Entities Bulk Update

DataMappingEntitiesBulkUpdate

Allows users to bulk update entities.

Data Mapping Automation Entities Inventory

DataMappingEntitiesInventory

Allows users to view and access the entities inventory.

Data Mapping Automation Export Entities

DataMappingExportEntities

Allows users to export entities.

Data Mapping Automation Inventory Assets

DataMappingInventoryAssets

Allows users to view the asset inventory table. Users will be able to view inventory items managed by parent and child organizations.

Data Mapping Automation Inventory Assets Add

DataMappingInventoryAssetsAdd

Allows users to add assets to the asset inventory table/list. Users can only add assets managed by the current users organization and child organizations.

Data Mapping Automation Inventory Assets Delete

DataMappingInventoryAssetsDelete

Allows users to delete an asset from asset inventory table. Users can only delete assets managed by the current users organization and child organizations.

Data Mapping Automation Inventory Assets Details

DataMappingInventoryAssetsDetails

Allows users to view the asset details card. This will show the user all of the asset attributes and the values that were populated for those attributes.

Data Mapping Automation Inventory Assets Edit

DataMappingInventoryAssetsEdit

Allows users to edit asset records in the assets Inventory. With this permission a user can change attribute values for records managed by their organization and children organizations.

Data Mapping Automation Inventory Assets Export

DataMappingInventoryAssetsExport

Allows users to export and view all asset and processing activity records and details including all data populated for those records in Microsoft Excel.

Data Mapping Automation Inventory Assets Launch Assessment

DataMappingInventoryAssetsLaunchAssessment

Allows users to bulk launch assessments on asset inventory records.

Data Mapping Automation Inventory Change Status

DataMappingInventoryChangeStatus

Allows users to change the status of inventory records.

Data Mapping Automation Inventory Create Master

DataMappingInventoryCreateMaster

Allows users to set up an inventory record as a 'master' so that versions can be created and linked to the master.

Data Mapping Automation Inventory Element Export

DataMappingInventoryElementExport

Allows users to export data elements lists.

Data Mapping Automation Inventory Item

DataMappingInventoryItem

Allows users to edit inventory items.

Data Mapping Automation Inventory Linking Bulk Import

DataMappingInventoryLinkingBulkImport

Allows users to use the Create Inventory Links and Link Personal Data to Inventory bulk import templates to populate the data mapping inventory.

Data Mapping Automation Inventory Manage Related

DataMappingInventoryManageRelated

Allows users to manage (add/remove) related inventory items through the 'related' tab in the inventory details of asset, processing activity, and entity records.

Data Mapping Automation Inventory PA Add

DataMappingInventoryPAAdd

Allows users to add processing activities to the processing activity inventory table/list. Users can only add processing activities managed by the user's current organization and child organizations.

Data Mapping Automation Inventory PA Delete

DataMappingInventoryPADelete

Allows users to delete a processing activity record from the processing activity inventory table. Users can only delete processing activities managed by the current user's organization and child organizations.

Data Mapping Automation Inventory PA Details

DataMappingInventoryPADetails

Allows users to view the details of an individual processing activity inventory record. This will show the user all of the processing activity attributes and the values that were populated for those attributes.

Data Mapping Automation Inventory PA Edit

DataMappingInventoryPAEdit

Allows users to edit processing activity records in the processing activity inventory. With this permission a user can change attribute values for records managed by their organization and child organizations.

Data Mapping Automation Inventory PA Export

DataMappingInventoryPAExport

Allows users to export and view all asset and processing activity records and details including all data populated for those records in Microsoft Excel.

Data Mapping Automation Inventory PA Launch

DataMappingInventoryPALaunch

Allows users to bulk launch assessments on processing activity inventory records.

Data Mapping Automation Inventory Processing Activity

DataMappingInventoryProcessingActivity

Allows users to view the processing activity inventory table/list. Users will be able to view inventory items managed by parent and child organizations.

Data Mapping Automation Inventory Selection Access Control Override

DataMappingInventorySelectionAccessControlOverride

Allows users to modify the inventory setting to override access control for inventory selection.

Data Mapping Automation Inventory Settings

DataMappingInventorySettings

Allows users to access the inventory settings.

Data Mapping Automation Inventory Settings Read

DataMappingInventorySettingsRead

Allows users to access the Get Inventory Settings API.

Data Mapping Automation Link Assessments

DataMappingLinkAssessments

Allows users to manually link assessments to a data mapping inventory record.

Data Mapping Automation Manage Data Element Visibility

DataMappingManageDataElementVisibility

Allows users to toggle data element visibility.

Data Mapping Automation Manage Data Subject Visibility

DataMappingManageDataSubjectVisibility

Allows users to configure visibility settings to determine which data subject types are visible and available for selection based on the organization of the inventory record or the assessment.

Data Mapping Automation Manage Locations

DataMappingManageLocations

Allows users to manage locations.

Data Mapping Automation Merge Data Elements

DataMappingMergeDataElements

Allows users to merge data elements into a master data element record.

Data Mapping Automation Module Entry Navigation

DataMappingModuleEntryNavigation

Allows users to view the data mapping tile on the OneTrust home page and data mapping launcher in the main menu which are the main entry points to access data mapping.

Data Mapping Automation New

DataMappingNew

Allows users to unlock the new DM module (controls routing, new DM menu item). If user didn't have this permission, they would not see the data mapping menu item.

Data Mapping Automation PA Bulk Create

DataMappingPABulkCreate

Allows users to create new processing activity inventory records in bulk using the bulk import service.

Data Mapping Automation PA Bulk Update

DataMappingPABulkUpdate

Allows users to update existing processing activity inventory records in bulk using the bulk import service.

Data Mapping Automation PA Process Gallery

DataMappingPAProcessGallery

Allows users to access process gallery and add sample processing activities.

Data Mapping Automation Reorder Attribute Options

DataMappingReOrderAttributeOptions

Allows users to customize the attributes options with arrows and drag and drop functionality.

Data Mapping Automation Schrems Export All

DataMappingSchremsExportAll

Allows users to export all the data on the cross border map into an excel or other readable format.

Data Mapping Automation Schrems Filter

DataMappingSchremsFilter

Allows users to use advanced processing activities filter on the cross border map.

Data Mapping Automation Templates

DataMappingTemplates

Allows users access to view the questionnaire templates within the data mapping module.

Data Mapping Automation Welcome Home Page

DataMappingWelcomeHomePage

Allows users to view data mapping welcome page / checklist.

Delete Asset Cert

DeleteAssetCert

Allows users to delete asset certificate.

DM AssessmentV2

DMAssessmentV2

Allows users to access DM with Assessment V2 (new version).

Edit Asset Cert

EditAssetCert

Allows users to edit asset certificate.

Edit Public ViewEdit Public View

DataMappingEditSavedPublicViews

Allows users to save and edit on views that are categorized as public.

Export Vendor Inventory

ExportVendorInventory

Allows users to export vendor inventory.

Inventory Add Attributes

InventoryAddAttributes

Allows users to add or edit inventory attributes in the attribute manager.

Inventory Asset Aggregate Risk History

InventoryAssetAggregateRiskHistory

Allows users to see the aggregate risk history for their assets.

Inventory Bulk Edit

InventoryBulkEdit

Allows users to bulk edit inventory.

Inventory Controls Tab

InventoryControlsTab

Allows users to view inventory controls tab.

Inventory Details View Assessments List

InventoryDetailsViewAssessmentsList

Allows users to view the list of assessments associated with a specific inventory record on the “assessments” tab of the inventory details.

Inventory Formula Attribute

InventoryFormulaAttribute

Allows users to create formula attributes on inventory attributes.

Inventory Process Aggregate Risk History

InventoryProcessAggregateRiskHistory

Allows users to see the aggregate risk history for their processing activities.

Inventory Remove Controls

InventoryRemoveControls

Allows users to remove inventory controls.

Inventory View Attributes

InventoryViewAttributes

Allows users to view the attribute manager and the list of individual attributes for each inventory type.

Inventory View Audit History

InventoryViewAuditHistory

Allows users to view the audit trail changelog for an inventory record.

Inventory View Related

InventoryViewRelated

Allows users to view related inventories in the details of an inventory record.

Legal Entities Create Tasks

DataMappingInventoryEntitiesTasksAdd

Allows users to create tasks on legal entities.

Legal Entities Delete Tasks

DataMappingInventoryEntitiesTasksDelete

Allows users to delete tasks on legal entities.

Legal Entities Edit Tasks

DataMappingInventoryEntitiesTasks

Allows users to view tasks for legal entities and the tasks that are assigned to them.

Manage Vendor Workflows

DataMappingInventoryVendorWorkflows

Allows users to access the vendor specific workflows configuration page.

Processing Activity Create Tasks

DataMappingInventoryPATasksAdd

Allows users to create tasks on processing activities.

Processing Activity Delete Tasks

DataMappingInventoryPATasksDelete

Allows users to delete tasks on processing activities.

Processing Activity Edit Tasks

DataMappingInventoryPATasks

Allows users to view tasks on processing activities and the tasks that are assigned to them.

Seeded Article 30 Report

SeededArticle30Report

Allows users to create reports using the seeded Article 30 template in the reporting module.

Template Attribute Question

TemplateAttributeQuestion

Allows users to access attribute questions on template.

Template Personal Data Question

TemplatePersonalDataQuestion

Allows users to access the personal data question type in templates.

Templates Question Type Data Element

TemplatesQuestionTypeDataElement

Allows users to add a data elements question to a template.

Vendor Aggregate Risk Score History

VendorAggregateRiskHistory

Allows users to view the Aggregate Risk History and Category Scores for Vendors

Vendor Attributes

VendorAttributes

Allows users to access vendor attributes.

Vendor Create Tasks

DataMappingInventoryVendorTasksAdd

Allows users to create tasks on vendors.

Vendor Delete Tasks

DataMappingInventoryVendorTasksDelete

Allows users to delete tasks on vendors

Vendor Edit Tasks

DataMappingInventoryVendorTasks

Allows users to view tasks for vendors and the tasks that are assigned to them.

Vendor Workflow Rules

DataMappingInventoryVendorWorkflowRules

Allows users to view the rules associated with vendor workflows.

Vendor Workflow Rules Create

DataMappingInventoryVendorWorkflowRulesCreate

Allows users to create and delete vendor workflow rules.

Vendor Workflow Rules Edit

DataMappingInventoryVendorWorkflowRulesEdit

Allows users to edit vendor workflow rules.

View Data Mapping Automation Custom Dashboards

ViewDMCustomDashboards

Allows users to view data mapping custom dashboards.

View Deleted Organizations

ViewDeletedOrganizations

Allows users to view deleted organizations.

VRM Delete Workflows

DataMappingDeleteVendorWorkflows

Allows users to delete vendor workflows.

Add Contracts from Contracts List View

VRMAddContracts

Allows users to add contracts from the list view and to add and update contracts using bulk import.

Add Vendor Certificate

AddVendorCert

Allows users to add a certificate to a vendor.

Custom Email Product/Service Rules View

CustomEmailProductServiceRulesView

Allows users to see and edit product/service rule email templates.

Custom Email Vendor Management View

CustomEmailVendorManagementView

Allows users to see and edit vendor management email templates.

Data Mapping Automation Inventory VRM Add

DataMappingInventoryVRMAdd

Allows users to add a vendor record.

Data Mapping Automation Inventory VRM Delete

DataMappingInventoryVRMDelete

Allows users to delete a vendor record.

Data Mapping Automation Inventory VRM Details

DataMappingInventoryVRMDetails

Allows users to view a vendor record.

Data Mapping Automation Inventory VRM Edit

DataMappingInventoryVRMEdit

Allows users to edit a vendor record.

Delete Vendor Certificate

DeleteVendorCert

Allows users to remove certificate from a vendor.

Delete Vendor Contracts

VRMDeleteContracts

Allows users to delete vendor contracts.

Delete Vendor Engagements

VRMDeleteEngagements

Allows users to delete vendor engagements.

Edit Contracts

VRMEditContracts

Allows users to update the contracts.

Edit Vendor Certificate

EditVendorCert

Allows users to edit vendor's certificate details.

Engagement Delete Tasks

engagements.tasks.delete

Allows users to delete tasks on engagements.

Engagement Documents Tab

Engagement Documents Tab

Allows users to view documents associated to the engagement.

Engagement Edit Tasks

engagements.tasks.create

Allows users to edit and create tasks on engagements.

Engagement Risks Tab

EngagementRisksTab

Allows users to view risks associated to the engagement.

Engagement View Tasks

engagements.tasks.view

Allows users to view tasks on engagements and tasks assigned to them.

Launch Vendor Assessment

LaunchVendorAssessment

Allows users to bulk launch assessments for multiple inventory items at the same time.

Request Assessment

VPAssessmentChasingRequestV2

Allows users to request an assessment.

Template Contract Question

VRMContractsQuestion

Allows users to configure vendor contract and contract attribute questions.

Template Engagement Question

engagements.templates.questions.create

Allows users to configure vendor engagement and engagement attribute questions.

Vendor Attachments Tab

VendorAttachmentsTab

Allows users to view the attachments related to the vendor.

Vendor Bulk Import

VendorBulkImport

Allows users to add vendors using bulk import.

Vendor Contract Detail Activity

VendorContractDetailActivity

Allows users to view the activity stream in a vendor record.

Vendor Contract Inventory Link

VendorContractInventoryLink

Allows users to link contracts to assets, processing activities, and vendors.

Vendor Contract Inventory Link Add

VendorContractInventoryLinkAdd

Allows users to link inventory records to contracts.

Vendor Contract Inventory Link Remove

VendorContractInventoryLinkRemove

Allows users to remove links between inventory records and contracts.

Contracts linked to Vendors View

Contracts linked to Vendors View

Allows users to view related to a vendor on the Documents tab of the Inventory Details screen.

Vendor Engagement Workflows

VRMEngagementWorkflows

Allows users to access the engagement workflows configuration page.

Vendor Inventory List

VendorInventoryList

Allows users to view the list of vendors within the Third-Party Risk Management module.

Vendor Risk

VendorRisk

Allows users to access the Third-Party Risk Management module.

Vendor Risk Assessment Manage Card

VendorRiskAssessmentManageCard

Allows users to create, assign, and manage assessments within Third-Party Risk Management module.

Third-Party Risk Management

VendorRiskManagement

Allows users to access the Third-Party Risk Management module.

Vendor Risk Questionnaire Add Card

VendorRiskQuestionnaireAddCard

Allows users to create, edit, delete, and archive templates to be used for conducting assessments.

Vendor Risk Reporting Card

VendorRiskReportingCard

Allows users to create, edit, and export reports on vendor's assessments and/or contracts.

Vendor Risks Tab

VendorRisksTab

Allows users to view risks associated to the vendor.

Vendor Specific Emails

VRMAssessmentEmails

Allows users to send vendor specific emails.

Vendor Templates

VendorTemplates

Allows users to access to vendor assessment templates.

Vendor Workflows

VRMWorkflows

Allows users to access the vendor specific workflows configuration page.

Vendorpedia

Vendorpedia

Allows users to access Vendorpedia.

Vendorpedia Agency Agreement

VPAgencyAgreement

Allows users to view and download the agency agreement.

Vendorpedia Request New

VendorpediaRequestNew

Allows users to request a new vendor in Vendorpedia.

Vendorpedia Sync Alerts

VPSyncAlerts

Allows users to receive alerts when vendor records receive auto-updates from Vendorpedia.

View Assessment Requests

ViewChasingRequests

Allows users to view the assessment request list page.

View Connected Vendor Tab

ViewConnectedVendorTab

Allows users to see the vendors connected to the Third-Party Risk Exchange record.

View Contracts Templates

CustomEmailContractsView

Allows users to see the contracts e-mail templates.

View Exchange Email Templates

CustomEmailVendorChasingView

Allows users to see the exchange e-mail templates.

View My Vendors in SSP

SSPMyVendorList

Allows users to view list of vendors in the self-service portal for which they are the assigned business owner.

View Vendor Custom Dashboards

ViewVendorCustomDashboards

Allows users to view vendor custom dashboards.

VP Add Services

VPAddServices

Allows users to add services from the Third-Party Risk Exchange.

VP Exchange

VPExchange

Allows users to view the Vendorpedia Exchange.

VP Exchange Actions

VPExchangeActions

Allows users to onboard vendors from the Exchange and suggest new data sources.

VP Exchange Gallery

VPExchangeGallery

Allows users to browse the contents of the Exchange.

VP Service And Certificates

VPServiceAndCertificates

Allows users to view vendor services and certificates.

VP Connect

VPConnect

Allows users to connect vendor records to Vendorpedia.

VRM Add Controls To Vendor

VRMAddControlsToVendor

Allows users to add controls to a vendor.

VRM Assessment Validation Level

VRMAssessmentLevel

Allows users to select assessment validation levels for assessment requests.

VRM Assessments

VRMAssessments

Allows users to access the assessments page in the Third-Party Risk Management module.

VRM Attribute Manager

VRMAttributeManager

Allows users to view new attribute manager side menu with tiles.

VRM Automate Workflow Stages

VRMAutomateWorkflowStages

Allows users to configure rules to skip vendor workflow stages.

VRM Certificates

VRMCertificates

Allows users to view vendor certificates.

VRM Contract Attribute Manager

VRMContractAttributeManager

Allows users to view contract attributes tile under VRM attribute manager.

VRM Contract Groups

VRMContractGroups

Allows users to configure groups in attribute manager and view in contract details.

VRM Contracts Export

VRMContractsExport

Allows users to export the contracts.

VRM Controls Tab

VRMControlsTab

Allows users to see the Controls tab on the vendor details.

VRM Dashboard

VRMDashboard

Allows users to view vendor dashboard.

VRM Edit Control On Vendor

VRMEditControlOnVendor

Allows users to edit controls added to the vendor details.

VRM Engagement Add

VRMEngagementsAdd

Allows users to create new engagement and bulk import engagement creations..

VRM Engagement Attribute Manager

VRMEngagementAttributeManager

Allows users to view engagement attributes tile under VRM attribute manager.

VRM Engagement Change Workflow

engagements.fields.workflow.edit

Allows users to change the workflow on an engagement.

VRM Engagement Edit

VRMEngagementDetailsEdit

Allows users to edit the engagement details and bulk update engagements.

VRM Engagement Export

VRMEngagementExport

Allows users to export engagements.

VRM Engagement Workflow Rules Edit

workflows.types.engagements.rules.edit

Allows users to configure and delete the rules on the engagement workflows.

VRM Engagement Workflows Rules

workflows.types.engagements.rules.view

Allows users to view the rules on the engagement workflows.

VRM Exchange Assessments

VRMExchangeProfileAssessmentsV2

Allows users to view assessments in the Third-Party Risk Exchange.

VRM Exchange DataGuidance® Research Articles

VRMVendorDataGuidanceArticles

Allows users to view vendor-specific articles from DataGuidance® Research in the Exchange.

VRM Export Vendor PDF

VendorDefaultPDFReport

Allows users to generate a PDF report on a vendor directly from the vendor’s context menu.

VRM Inherent Risk questionnaire

VRMInherentRisk

Allows users to see and access the Inherent Risk Questionnaire.

VRM Link Assessments to Engagements

Engagements.Assessments.Edit

Allows users to link assessments to engagements.

VRM Remove Control From Vendor

VRMRemoveControlFromVendor

Allows users to remove controls added to the vendor details.

VRM Scheduler

VRMScheduler

Allows users to create new Rules / Scheduler conditions within the VRM Rules page.

VRM Setup Menu

VRMSetupMenu

Allows users to access the setup menu in VRM.

VRM Templates Menu

VRMTemplatesMenu

Allows users to access the templates menu in VRM.

VRM Tile Launcher

VRMTileLauncher

Allows users to view the VRM Welcome Tile and Launcher.

VRM View Related Processing Activities

VRMViewRelatedProcessingActivities

Allows users to navigate to the processing activity records which are related to a vendor record through the vendor’s Related tab.

VRM VP Pre-Completed Assessments

VRMVPPreCompletedAssessments

Allows users to view pre-completed vendor assessments in Vendorpedia.